From 86a82a5e4eaf1db45e72182e8dc14ca85e9988cc Mon Sep 17 00:00:00 2001
From: Franck Cuny <franck@fcuny.net>
Date: Sun, 6 Mar 2022 08:09:06 -0800
Subject: traefik: initial configuration

I want to run traefik on the NAS, so I can reach grafana and other
future services running on that host.

To manage TLS, we use let's encrypt with a DNS challenge. For this to
work we need a service account configuration, that is encrypted with
age.
---
 secrets.nix | 3 +++
 1 file changed, 3 insertions(+)

(limited to 'secrets.nix')

diff --git a/secrets.nix b/secrets.nix
index 64c60c0..3d50744 100644
--- a/secrets.nix
+++ b/secrets.nix
@@ -15,4 +15,7 @@ in {
 
   "secrets/network/tahoe/wireguard_privatekey.age".publicKeys =
     [ fcuny_aptos aptos tahoe ];
+
+  "secrets/traefik/gcp_service_account.json.age".publicKeys =
+    [ fcuny_aptos aptos tahoe ];
 }
-- 
cgit 1.4.1